CVE-2024-39709 — Ivanti / Connect Secure

CVE-2024-39709

Ivanti / Connect Secure PUBLISHED

Description (CNA)

Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1 (Not Applicable to 9.1Rx) allow a local authenticated attacker to escalate their privileges.

Affected (CNA)

Vendor / product	Versions
Ivanti / Connect Secure	affected 22.6R2 before 22.6R2
Ivanti / Policy Secure	affected 22.7R1 before 22.7R1

CWE

No CWE identifiers supplied.

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.